← Back to Application Layer Gateway Security Requirements Guide

V-205010

CAT II (Medium)

The ALG must identify and log internal users associated with denied outgoing communications traffic posing a threat to external information systems.

Rule ID

SV-205010r831386_rule

STIG

Application Layer Gateway Security Requirements Guide

Version

V2R3

CCIs

CCI-002400

Discussion

Without identifying the users who initiated the traffic, it would be difficult to identify those responsible for the denied communications. This requirement applies to those network elements that perform Data Leakage Prevention (DLP) (e.g., ALGs, proxies, or application level firewalls).

Check Content

Verify the ALG identifies and logs internal users associated with denied outgoing communications traffic posing a threat to external information systems.

If the ALG does not identify and log internal users associated with denied outgoing communications traffic posing a threat to external information systems, this is a finding.

Fix Text

Configure the ALG to identify and log internal users associated with denied outgoing communications traffic posing a threat to external information systems.